Acceptable Use Policy

CrisisCommand, Inc.

Last updated: July 21, 2026

---

This Acceptable Use Policy (“AUP”) is incorporated into the Platform Agreement and forms part of the Agreement between Customer and CrisisCommand, Inc. (“CrisisCommand”). Capitalized terms used but not defined here have the meanings set forth in the Platform Agreement. CrisisCommand may update this AUP from time to time in accordance with Section 1.4 of the Platform Agreement.

Violation of this AUP may result in suspension or termination of access to the Service in accordance with Section 3.3 of the Platform Agreement.

Prohibited Conduct

You agree not to, and not to direct or permit authorized users or third parties to, use the Service to:

• violate any applicable law, regulation, or legal obligation, or encourage or facilitate others to do so;

• infringe, misappropriate, or violate the intellectual property rights, privacy rights, or other legal rights of any person or entity;

• generate or distribute content that is defamatory, harassing, threatening, discriminatory, or that promotes violence or hatred against any individual or group;

• impersonate any person or entity, or misrepresent your affiliation with any person or entity;

• submit Protected Health Information (as defined by HIPAA), student education records (as defined by FERPA), customer financial account data subject to financial-privacy or banking regulations (such as the Gramm-Leach-Bliley Act), or other data subject to sector-specific regulatory frameworks requiring specialized data handling certifications (see Section 3.4 of the Platform Agreement). For absolute clarity, the Service is not a HIPAA-compliant system of record, does not store or process customer financial data subject to financial-privacy or banking regulations, and does not determine materiality, disclosure timing, or regulatory reporting obligations; Customer retains sole responsibility for compliance with securities laws and disclosure controls;

• represent any Output as legal advice, regulatory guidance, or professional crisis consulting;

• represent Output as wholly human-generated without disclosure of AI involvement where required by law;

• use Output as the sole basis for decisions that may result in harm to individuals, including emergency response decisions affecting life safety, without independent human review and professional judgment;

• reverse engineer, decompile, or attempt to discover the source code, algorithms, or underlying models of the Service;

• use automated means to scrape, extract, or collect content or Output from the Service;

• use the Service or any Output to develop, train, or improve any AI or machine learning model outside of authorized use of the Service;

• sublicense, resell, or make the Service available to any third party other than authorized users under your subscription;

• interfere with, disrupt, or compromise the security, integrity, or performance of the Service or its underlying infrastructure;

• distribute viruses, malware, or other harmful code through the Service; or

• share, transfer, or disclose access credentials to any person other than the authorized user to whom they were issued.

Account Security

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. Access credentials are assigned to individual authorized users and may not be shared within or outside your organization. You agree to notify CrisisCommand promptly at security@crisiscommand.ai if you become aware of any unauthorized use of your account or any other breach of security.

Reporting Violations

If you become aware of any violation of this AUP, please notify us at legal@crisiscommand.ai. CrisisCommand reserves the right to investigate and take appropriate action, including suspension or termination of access, in accordance with the Platform Agreement.